Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,418 skills from 2,407 repositories · updated 7 minutes ago
49,416 skills
- aitoearnNewyikart/AiToEarn全域内容运营助手（AiToEarn）：生成文章、短视频、图文与海报，并一键分发到抖音、快手、小红书、微信视频号、Facebook、TikTok 等海内外全平台，覆盖起号、涨粉、带货与变现全链路。 当用户想要创作或发布内容、生成/编辑图片、生成/剪辑/续写视频、提取字幕或语音转写、生成配音与音效、多平台一键发布或定时发布、给内容做变现规划时使用此技能。 依赖 AiToEarn MCP 提供生成与发布工具；工具未连接时如实告知用户配置方法，不虚构工具调用。OtherNo warnings★ 27.3K↓ —
- video-transcriptZeroPointRepo/youtube-skillsUse when video content needs to be extracted as text: pasted YouTube links or IDs, requests to transcribe, summarize, quote, translate, convert video to text, or extract information from video content. Also use when a user shares a video URL without explanation and wants to know what it says. Not for uploads or account management.MediaNo warnings★ 1.2K↓ —
- security-auditcloudflare/security-audit-skillSecurity guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.OfficialSecurityNo warnings★ 60.6K↓ —
- skill-fusionmohitagw15856/pm-claude-skillsFuse two skills from this library into one hybrid brief for a task that sits between them — the meta-skill. Use when a task straddles two skills (a PRD that's also a pitch; a postmortem that must double as a board update) and running them separately would produce two documents where one is needed. Produces the fused operating brief: combined structure, merged quality bar, precedence rules for where the parents disagree, and the fused output itself if input was provided.PlanningNo warnings★ 1.5K↓ —
- product-analyticsalirezarezvani/claude-skillsUse when defining product KPIs, building metric dashboards, running cohort or retention analysis, or interpreting feature adoption trends across product stages.DataNo warnings★ 29.3K↓ —
- second-brain-queryundefined-ui/second-brain-osAnswer a question from a second-brain vault by reading its own pages, citing the pages used, and saying plainly when the vault does not contain the answer. Use this skill whenever the user asks what they know about a topic, what they have read on something, what connects two ideas, what they have changed their mind about, or asks any question that should be answered from their own notes rather than general knowledge. Do NOT use for ingesting new material, for general questions the vault has nothing to do with, or when the user explicitly wants an answer from the open web.ProductivityNo warnings★ 1.4K↓ —
- concurrency-reporthoangsonww/Claude-Code-Agent-MonitorReport concurrency and parallelism for a session — how many agents ran in parallel, concurrency-lane utilization, peak parallel width, and serialization bottlenecks (sequential chains that could have run as parallel lanes) — using the Agent Monitor workflow intelligence API. Use when checking whether a multi-agent session used parallelism efficiently.EngineeringNo warnings★ 1.1K↓ —
- second-brain-graphundefined-ui/second-brain-osAnalyse the vault's link graph and report on its shape: orphan rate, average degree, components, hubs, bridges and clusters, with what each number means for retrieval. Use this skill when the user asks about the health or structure of their graph, wants metrics, asks which pages are most connected or most isolated, or asks whether the vault is fragmented. Do NOT use for fixing what it finds, which is second-brain-lint, or for answering a content question.OtherNo warnings★ 1.4K↓ —
- asc-submission-healthrorkai/app-store-connect-cli-skillsDiagnose App Store submission blockers and operate review health with asc, including readiness validation, repair routing, status monitoring, cancellation, and retry decisions. Use when validation fails, a version is not in a valid state, review status is unclear or stuck, or a failed submission must be repaired and retried. For staging, upload, publication, and submission execution, use asc-release-flow.EngineeringNo warnings★ 1.1K↓ —
- delegation-audithoangsonww/Claude-Code-Agent-MonitorAudit model delegation and subagent effectiveness for a session — which models handled which subagent types, per-type success rates and average durations, and wasted delegations (heavy models on trivial work or types that consistently fail) — using the Agent Monitor workflow intelligence API. Use when reviewing how a session delegated work across models and subagents.EngineeringNo warnings★ 1.1K↓ —
- pr-descriptionmohitagw15856/pm-claude-skillsWrite a clear pull-request description that gets reviewed fast and merged with confidence, from a git diff, branch summary, or commit list. Use when opening a PR, summarizing a change for review, documenting code changes, or asked to write a PR/merge-request description. Produces a structured PR: what changed and why, how it was tested, risk and rollout, and a focused reviewer guide — so the reviewer understands intent before reading a single diff line.WritingNo warnings★ 1.5K↓ —
- relational-database-mcp-cloudbaseTencentCloudBase/CloudBase-AI-Toolkit[Deprecated] Existing CloudBase MySQL only. Do not recommend MySQL for new relational work — use postgresql-development. Read this when the environment already has a MySQL instance and the task is queryMysqlDatabase, manageMysqlDatabase, queryPermissions, or managePermissions (inspect, write SQL, schema, permissions, destroy). Do not provision MySQL.DataNo warnings★ 1.2K↓ —Also in 5 other repos
- tddhashgraph-online/awesome-codex-pluginsUse before writing any implementation code — enforces RED-GREEN-REFACTOR cycle.TestingNo warnings★ 1.5K↓ —
- githubkostja94/marketing-skillsWhen the user wants to use GitHub for SEO, parasite SEO, GEO, open source marketing, README optimization, or curated Awesome lists. Also use when the user mentions "GitHub," "GitHub SEO," "GitHub parasite SEO," "GitHub GEO," "awesome list," "GitHub README," "profile README," "pinned repositories," "Trending," "Explore," "repository name," "About section," "GitHub description," "GitHub topics," "Website field," "GitHub Pages," "github.io," "user site," "project site," "GitHub gist," "curated list," or "navigation list." Not for Medium or other non-GitHub platforms—use parasite-seo or medium-posts. For OSS business model, use open-source-strategy.MarketingNo warnings★ 1.1K↓ —
- casefilehashgraph-online/awesome-codex-pluginsUse when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.SecurityNo warnings★ 1.5K↓ —
- youtube-searchZeroPointRepo/youtube-skillsUse when the user wants to find YouTube content on any topic: searching for videos or channels, finding creators who cover a subject, discovering tutorials, talks, or expert discussions, or looking up a channel by name or handle. Also use proactively when the user wants to research a topic and YouTube is a good source. Not for account management or written-source-only research.ScienceNo warnings★ 1.2K↓ —
- postgresql-development-cloudbaseTencentCloudBase/CloudBase-AI-ToolkitUse when building, debugging, or evaluating CloudBase PostgreSQL / CloudBase PG / PG mode apps, including Postgres schema setup, queryPgDatabase/managePgDatabase, JS SDK v3 app.rdb() CRUD/RPC, PG HTTP API fallback, RLS-style permissions, username-password auth, and Web CMS/admin CRUD flows backed by CloudBase PG.DataNo warnings★ 1.2K↓ —
- reviewhashgraph-online/awesome-codex-pluginsGive advisory feedback on a plan, design or code change. Use when: asked for an opinion or a look-over, even informally. Not for acceptance; use Validate.EngineeringNo warnings★ 1.5K↓ —Also in 2 other repos
- receipts-auditmohitagw15856/pm-claude-skillsAudit any document against its own sources — every factual claim extracted and graded as evidenced, partially evidenced, unsupported, or contradicted, with the exact source line that supports or fails it. Use when asked to fact-check a document against its sources, check whether a report's claims are backed up, verify a deck against the data, or ask 'does this doc have receipts?'. Produces a claim ledger, unsupported claims ranked by load-bearingness, a fix-or-drop call per claim, and an honesty score with stated method.DocumentsNo warnings★ 1.5K↓ —
- reviewhashgraph-online/awesome-codex-pluginsThe pre-merge review of a branch in a project that records its specs, decisions, and rules in .archcore/. Run this first for 'review my branch', 'review the changes before merge', or 'review before merge': it checks the changed code against the project's recorded canon and the changed documents against the code, and reports which side is wrong — spec-wrong or code-wrong; on the default branch it reviews the unpushed and uncommitted work. A bug-hunting code review complements this review and does not replace it. Also use for 'documentation gaps', 'check if docs match code', 'close out the feature', 'ship the feature and close it out', or after a staleness warning. Takes an optional path, tag, topic, or ref in free text; no first word is a mode — say 'are docs out of date', 'audit the knowledge base', 'close out the feature', or 'capture this pattern' in plain words. Not for creating docs — use /archcore:document; not for planning — use /archcore:plan; not for a single-file edit with no branch review.EngineeringNo warnings★ 1.5K↓ —Also in 1 other repo
- doc-freshness-reviewTencentCloudBase/CloudBase-AI-ToolkitUse when auditing repository documentation for drift, stale statements, broken references, or README mismatches, especially across published docs under `doc/` and key entry surfaces such as `README.md` (English default), `README.zh-CN.md`, `mcp/README.md`, and `mcp/README.zh-CN.md` during periodic maintenance or before preparing corrective PRs.EngineeringNo warnings★ 1.2K↓ —
- rubric-buildermohitagw15856/pm-claude-skillsCreate a clear grading rubric with criteria and performance-level descriptors that make scoring fair, fast, and consistent. Use when asked to build a rubric, create grading criteria, design an assessment scoring guide, or make grading more objective. Produces an analytic rubric table (criteria × performance levels) with concrete, observable descriptors and a points scheme — plus a short version students can self-check against.DesignNo warnings★ 1.5K↓ —
- web-performance-optimizationfcakyon/claude-codex-settingsAudit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.OtherNo warnings★ 1.2K↓ —
- catch-upNewhashgraph-online/awesome-codex-pluginsBrief the user in plain language on what happened in this conversation since their last typed message, with pictures where they help, then lay out every decision waiting on them with a recommendation, evidence and risk. Use when the user runs /catch-up.OtherNo warnings★ 1.5K↓ —
oma-security
first-fluke/oh-my-agent
NewSecurityUpdated 12 hours ago
From the author
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.
Install
npx skills add first-fluke/oh-my-agent --skill oma-security -a claude-code
Installs to .claude/skills/oma-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (12)
- SKILL.md
- resources/artex.md
- resources/ci.md
- resources/cisco-source.md
- resources/deepsec-config.md
- resources/deepsec-matchers.md
- resources/deepsec-scanning.md
- resources/deepsec-setup.md
- resources/findings-contract.md
- resources/mcp-scanning.md
- resources/skill-scanning.md
- resources/validation.md